[*] Binary protection state of ubiupdatevol
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of ubiupdatevol
1178c: e3a03016 mov r3, #22
11790: e5803000 str r3, [r0]
11794: e3e00000 mvn r0, #0
11798: e28dd01c add sp, sp, #28
1179c: e8bd8030 pop {r4, r5, pc}
117a0: 000250b0 strheq r5, [r2], -r0
117a4: 000140a0 andeq r4, r1, r0, lsr #1
117a8: 0001416c andeq r4, r1, ip, ror #2
117ac: e92d48f0 push {r4, r5, r6, r7, fp, lr}
117b0: e28db014 add fp, sp, #20
117b4: e1a06001 mov r6, r1
117b8: e1a04002 mov r4, r2
117bc: e1a05000 mov r5, r0
117c0: ebfffca1 bl 10a4c <strlen@plt>
117c4: e1a02006 mov r2, r6
117c8: e1a01005 mov r1, r5
117cc: e2800039 add r0, r0, #57 ; 0x39
117d0: e3c00007 bic r0, r0, #7
117d4: e04dd000 sub sp, sp, r0
117d8: e1a0000d mov r0, sp
117dc: ebfffc91 bl 10a28 <sprintf@plt>
117e0: e1a01004 mov r1, r4
117e4: e1a0000d mov r0, sp
117e8: ebffffd2 bl 11738 <free@plt+0xca4>
117ec: e24bd014 sub sp, fp, #20
117f0: e8bd88f0 pop {r4, r5, r6, r7, fp, pc}
117f4: e92d48f0 push {r4, r5, r6, r7, fp, lr}
117f8: e28db014 add fp, sp, #20
117fc: e1a06001 mov r6, r1
11800: e1a07002 mov r7, r2
11804: e1a04003 mov r4, r3
11808: e1a05000 mov r5, r0
1180c: ebfffc8e bl 10a4c <strlen@plt>
11810: e1a03007 mov r3, r7
11814: e1a02006 mov r2, r6
11818: e1a01005 mov r1, r5
1181c: e280006b add r0, r0, #107 ; 0x6b
11820: e3c00007 bic r0, r0, #7
11824: e04dd000 sub sp, sp, r0
11828: e1a0000d mov r0, sp
1182c: ebfffc7d bl 10a28 <sprintf@plt>
11830: e1a01004 mov r1, r4
11834: e1a0000d mov r0, sp
--
11c80: eaffffe8 b 11c28 <free@plt+0x1194>
11c84: 0001427a andeq r4, r1, sl, ror r2
11c88: 000140a0 andeq r4, r1, r0, lsr #1
11c8c: 00014281 andeq r4, r1, r1, lsl #5
11c90: 000250b0 strheq r5, [r2], -r0
11c94: 000142b4 ; <UNDEFINED> instruction: 0x000142b4
11c98: e92d48f0 push {r4, r5, r6, r7, fp, lr}
11c9c: e5904000 ldr r4, [r0]
11ca0: e28db014 add fp, sp, #20
11ca4: e1a00004 mov r0, r4
11ca8: e1a06003 mov r6, r3
11cac: e1a07001 mov r7, r1
11cb0: e1a05002 mov r5, r2
11cb4: ebfffb64 bl 10a4c <strlen@plt>
11cb8: e1a02007 mov r2, r7
11cbc: e1a01004 mov r1, r4
11cc0: e2800039 add r0, r0, #57 ; 0x39
11cc4: e3c00007 bic r0, r0, #7
11cc8: e04dd000 sub sp, sp, r0
11ccc: e1a0000d mov r0, sp
11cd0: ebfffb54 bl 10a28 <sprintf@plt>
11cd4: e1a02006 mov r2, r6
11cd8: e1a01005 mov r1, r5
--
127d8: e59f20c0 ldr r2, [pc, #192] ; 128a0 <free@plt+0x1e0c>
127dc: e59f10d0 ldr r1, [pc, #208] ; 128b4 <free@plt+0x1e20>
127e0: e5900000 ldr r0, [r0]
127e4: ebfff868 bl 1098c <fprintf@plt>
127e8: ebfff891 bl 10a34 <__errno_location@plt>
127ec: e3a03013 mov r3, #19
127f0: eaffffcd b 1272c <free@plt+0x1c98>
127f4: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
127f8: e1530009 cmp r3, r9
127fc: 1affffed bne 127b8 <free@plt+0x1d24>
12800: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
12804: e1540003 cmp r4, r3
12808: caffffee bgt 127c8 <free@plt+0x1d34>
1280c: e3570000 cmp r7, #0
12810: 03a00001 moveq r0, #1
12814: 0affffb6 beq 126f4 <free@plt+0x1c60>
12818: e2473001 sub r3, r7, #1
1281c: e1a02004 mov r2, r4
12820: e5961040 ldr r1, [r6, #64] ; 0x40
12824: e1a00008 mov r0, r8
12828: ebfff87e bl 10a28 <sprintf@plt>
1282c: e3a01000 mov r1, #0
12830: e1a00008 mov r0, r8
--
12c58: ebfff724 bl 108f0 <ioctl@plt>
12c5c: e2900000 adds r0, r0, #0
12c60: 13a00001 movne r0, #1
12c64: e2600000 rsb r0, r0, #0
12c68: e28dd014 add sp, sp, #20
12c6c: e49df004 pop {pc} ; (ldr pc, [sp], #4)
12c70: 40044f02 andmi r4, r4, r2, lsl #30
12c74: e92d4830 push {r4, r5, fp, lr}
12c78: e28db00c add fp, sp, #12
12c7c: e24dd068 sub sp, sp, #104 ; 0x68
12c80: e5904010 ldr r4, [r0, #16]
12c84: e1a05001 mov r5, r1
12c88: e1a00004 mov r0, r4
12c8c: ebfff76e bl 10a4c <strlen@plt>
12c90: e1a02005 mov r2, r5
12c94: e1a01004 mov r1, r4
12c98: e2800039 add r0, r0, #57 ; 0x39
12c9c: e3c00007 bic r0, r0, #7
12ca0: e04dd000 sub sp, sp, r0
12ca4: e1a0000d mov r0, sp
12ca8: ebfff75e bl 10a28 <sprintf@plt>
12cac: e24b1074 sub r1, fp, #116 ; 0x74
12cb0: e1a0000d mov r0, sp
--
12f20: ebfffa21 bl 117ac <free@plt+0xd18>
12f24: e3500000 cmp r0, #0
12f28: 1affff77 bne 12d0c <free@plt+0x2278>
12f2c: e2842048 add r2, r4, #72 ; 0x48
12f30: e1a01006 mov r1, r6
12f34: e5950030 ldr r0, [r5, #48] ; 0x30
12f38: ebfffa1b bl 117ac <free@plt+0xd18>
12f3c: e3500000 cmp r0, #0
12f40: 1affff71 bne 12d0c <free@plt+0x2278>
12f44: e595802c ldr r8, [r5, #44] ; 0x2c
12f48: e1a0900d mov r9, sp
12f4c: e1a00008 mov r0, r8
12f50: ebfff6bd bl 10a4c <strlen@plt>
12f54: e1a02006 mov r2, r6
12f58: e1a01008 mov r1, r8
12f5c: e2800039 add r0, r0, #57 ; 0x39
12f60: e3c00007 bic r0, r0, #7
12f64: e04dd000 sub sp, sp, r0
12f68: e28d7008 add r7, sp, #8
12f6c: e1a00007 mov r0, r7
12f70: ebfff6ac bl 10a28 <sprintf@plt>
12f74: e2841040 add r1, r4, #64 ; 0x40
12f78: e1a00007 mov r0, r7
--
13200: e1a05001 mov r5, r1
13204: e1a06002 mov r6, r2
13208: e3a01000 mov r1, #0
1320c: e3a020b0 mov r2, #176 ; 0xb0
13210: e1a07000 mov r7, r0
13214: e1a00009 mov r0, r9
13218: e1a04003 mov r4, r3
1321c: ebfff5f5 bl 109f8 <emset@plt>
13220: e597a048 ldr sl, [r7, #72] ; 0x48
13224: e8840060 stm r4, {r5, r6}
13228: e1a0000a mov r0, sl
1322c: ebfff606 bl 10a4c <strlen@plt>
13230: e1a0800d mov r8, sp
13234: e1a03006 mov r3, r6
13238: e1a02005 mov r2, r5
1323c: e1a0100a mov r1, sl
13240: e280006b add r0, r0, #107 ; 0x6b
13244: e3c00007 bic r0, r0, #7
13248: e04dd000 sub sp, sp, r0
1324c: e1a0000d mov r0, sp
13250: ebfff5f4 bl 10a28 <sprintf@plt>
13254: e1a0000d mov r0, sp
13258: e284200c add r2, r4, #12
1325c: e1a01009 mov r1, r9
13260: ebfffa56 bl 11bc0 <free@plt+0x112c>
13264: e1a0d008 mov sp, r8
13268: e3500000 cmp r0, #0
1326c: 0a000003 beq 13280 <free@plt+0x27ec>
13270: e3e08000 mvn r8, #0
13274: e1a00008 mov r0, r8
13278: e24bd020 sub sp, fp, #32
1327c: e8bd8ff0 pop {r4, r5, r6, r7, r8, r9, sl, fp, pc}
13280: e5979044 ldr r9, [r7, #68] ; 0x44
13284: e1a00009 mov r0, r9
13288: ebfff5ef bl 10a4c <strlen@plt>
1328c: e1a03006 mov r3, r6
13290: e1a02005 mov r2, r5
13294: e1a01009 mov r1, r9
13298: e280006b add r0, r0, #107 ; 0x6b
1329c: e3c00007 bic r0, r0, #7
132a0: e04dd000 sub sp, sp, r0
132a4: e1a0000d mov r0, sp
132a8: ebfff5de bl 10a28 <sprintf@plt>
132ac: e1a0000d mov r0, sp
132b0: e3a02032 mov r2, #50 ; 0x32
--
132fc: e3a03003 mov r3, #3
13300: e5843010 str r3, [r4, #16]
13304: e1a02006 mov r2, r6
13308: e2843014 add r3, r4, #20
1330c: e1a01005 mov r1, r5
13310: e597004c ldr r0, [r7, #76] ; 0x4c
13314: ebfff936 bl 117f4 <free@plt+0xd60>
13318: e3500000 cmp r0, #0
1331c: 1affffd3 bne 13270 <free@plt+0x27dc>
13320: e5978050 ldr r8, [r7, #80] ; 0x50
13324: e1a0900d mov r9, sp
13328: e1a00008 mov r0, r8
1332c: ebfff5c6 bl 10a4c <strlen@plt>
13330: e1a03006 mov r3, r6
13334: e1a02005 mov r2, r5
13338: e1a01008 mov r1, r8
1333c: e280006b add r0, r0, #107 ; 0x6b
13340: e3c00007 bic r0, r0, #7
13344: e04dd000 sub sp, sp, r0
13348: e1a0000d mov r0, sp
1334c: ebfff5b5 bl 10a28 <sprintf@plt>
13350: e1a0000d mov r0, sp
13354: e2841018 add r1, r4, #24
--
133a4: e1a02006 mov r2, r6
133a8: e1a01005 mov r1, r5
133ac: e597005c ldr r0, [r7, #92] ; 0x5c
133b0: ebfff90f bl 117f4 <free@plt+0xd60>
133b4: e2508000 subs r8, r0, #0
133b8: 1affffac bne 13270 <free@plt+0x27dc>
133bc: e5941028 ldr r1, [r4, #40] ; 0x28
133c0: e594002c ldr r0, [r4, #44] ; 0x2c
133c4: e5977060 ldr r7, [r7, #96] ; 0x60
133c8: e0c32190 smull r2, r3, r0, r1
133cc: e1a00007 mov r0, r7
133d0: e1c422f0 strd r2, [r4, #32]
133d4: ebfff59c bl 10a4c <strlen@plt>
133d8: e1a03006 mov r3, r6
133dc: e1a02005 mov r2, r5
133e0: e1a01007 mov r1, r7
133e4: e280006b add r0, r0, #107 ; 0x6b
133e8: e3c00007 bic r0, r0, #7
133ec: e04dd000 sub sp, sp, r0
133f0: e1a0000d mov r0, sp
133f4: ebfff58b bl 10a28 <sprintf@plt>
133f8: e1a0000d mov r0, sp
133fc: e3a02081 mov r2, #129 ; 0x81
--
13618: 0a000004 beq 13630 <free@plt+0x2b9c>
1361c: e5963000 ldr r3, [r6]
13620: e3530002 cmp r3, #2
13624: 1affffca bne 13554 <free@plt+0x2ac0>
13628: e2844001 add r4, r4, #1
1362c: eafffff0 b 135f4 <free@plt+0x2b60>
13630: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
13634: e15a0003 cmp sl, r3
13638: 1afffffa bne 13628 <free@plt+0x2b94>
1363c: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
13640: e1540003 cmp r4, r3
13644: c3a03013 movgt r3, #19
13648: c5863000 strgt r3, [r6]
1364c: caffffc0 bgt 13554 <free@plt+0x2ac0>
13650: e51b30bc ldr r3, [fp, #-188] ; 0xffffff44
13654: e1a02004 mov r2, r4
13658: e2438001 sub r8, r3, #1
1365c: e1a03008 mov r3, r8
13660: e5951040 ldr r1, [r5, #64] ; 0x40
13664: e1a00007 mov r0, r7
13668: ebfff4ee bl 10a28 <sprintf@plt>
1366c: e3a01000 mov r1, #0
13670: e1a00007 mov r0, r7
[*] Function sprintf used 11 times ubiupdatevol